Pullup ticket #4264 - requested by taca
net/samba: security update

Revisions pulled up:
- net/samba/Makefile                                            1.239-1.240
- net/samba/distinfo                                            1.94-1.95

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Wed Oct  9 14:46:35 UTC 2013

   Modified Files:
   	pkgsrc/net/samba: Makefile distinfo

   Log Message:
   Update samba to 3.6.19.

   Changes since 3.6.18:
   ---------------------

   o   Jeremy Allison <jra@samba.org>
       * BUG 5917: Make Samba work on site with Read Only Domain Controlle=
   r.

   o   Christian Ambach <ambi@samba.org>
       * BUG 8955: NetrServerPasswordSet2 timeout is too short.

   o   G=FCnther Deschner <gd@samba.org>
       * BUG 9899: Fix fallback to ncacn_np in cm_connect_lsat().
       * BUG 9615: Fix fallback to ncacn_np in cm_connect_lsat().
       * BUG 10127: Fix 'smbstatus' as non-root user.

   o   Volker Lendecke <vl@samba.org>
       * BUG 8955: Give machine password changes 10 minutes of time.
       * BUG 10106: Honour output buffer length set by the client for SMB2=
    GetInfo
         requests.
       * BUG 10114: Handle Dropbox (write-only-directory) case correctly i=
   n
         pathname lookup.

   o   Karolin Seeger <kseeger@samba.org>
       * BUG 10076: Fix variable list in man vfs_crossrename.

   o   Andreas Schneider <asn@samba.org>
       * BUG 9994: s3-winbind: Do not delete an existing valid credential =
   cache.
       * BUG 10073: 'net ads join': Fix segmentation fault in
         create_local_private_krb5_conf_for_domain.

   o   Richard Sharpe <realrichardsharpe@gmail.com>
       * BUG 10097: MacOSX 10.9 will not follow path-based DFS referrals h=
   anded
         out by Samba.

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Tue Nov 12 11:30:01 UTC 2013

   Modified Files:
   	pkgsrc/net/samba: Makefile distinfo

   Log Message:
   Changes 3.6.20:
   These are security releases in order to address CVE-2013-4475 (ACLs are=
    not checked on opening an alternate data stream on a file or directory=
   ) and CVE-2013-4476 (Private key in key.pem world readable).
Pullup ticket #4265 - requested by taca
mail/dovecot2: security update

Revisions pulled up:
- mail/dovecot2/Makefile                                1.51,1.53 via patch
- mail/dovecot2/PLIST                                   1.28-1.29
- mail/dovecot2/distinfo                                1.39-1.40

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Tue Oct  8 13:52:47 UTC 2013

   Modified Files:
   	pkgsrc/mail/dovecot2: Makefile PLIST distinfo

   Log Message:
   Changes 2.2.6:
   * acl: If public/shared namespace has a shared subscriptions file for
     all users, don't list subscription entries that are not visible to
     the user accessing it.
   + doveadm: Added "auth lookup" command for doing passdb lookup.
   + login_log_format_elements: Added %{orig_user}, %{orig_username}
     and %{orig_domain} expanding to the username exactly as sent by
     the client (before any changes auth process made).
   + Added ssl_prefer_server_ciphers setting.
   + auth_verbose_passwords: Log the password also for unknown users.
   + Linux: Added optional support for SO_REUSEPORT with
     inet_listener { reuse_port=yes }
   - director: v2.2.5 changes caused "SYNC lost" errors
   - dsync: Many fixes and error handling improvements
   - doveadm -A: Don't waste CPU by doing a separate config lookup
     for each user
   - Long-running ssl-params process no longer prevents Dovecot restart
   - mbox: Fixed mailbox_list_index=yes to work correctly

---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Wed Nov  6 14:20:58 UTC 2013

   Modified Files:
   	pkgsrc/mail/dovecot2: Makefile PLIST distinfo

   Log Message:
   Changes 2.2.7:
   * Some usage of passdb checkpassword could have been exploitable by
     local users. You may need to modify your setup to keep it working.
     See http://wiki2.dovecot.org/AuthDatabase/CheckPassword#Security
   + auth: Added ability to truncate values logged by
     auth_verbose_passwords (see 10-logging.conf comment)
   + mdbox: Added "mdbox_deleted" storage, which can be used to access
     messages with refcount=0. For example: doveadm import
     mdbox_deleted:~/mdbox "" mailbox inbox subject oops
   + ssl-params: Added ssl_dh_parameters_length setting.
   - master process was doing a hostname.domain lookup for each created
     process, which may have caused a lot of unnecessary DNS lookups.
   - dsync: Syncing over 100 messages at once caused problems in some
     situations, causing messages to get new UIDs.
   - fts-solr: Different Solr hosts for different users didn't work.
Pullup tickets #4264 and #4265.
Pullup tickets #4264 and #4265.